Senior Cloud & AI Security Engineer — Zero Trust

SoundCloud; New York (NY); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401k

Equity plan

Professional development

Wellness benefit

PTO 35 days

Job summary

SoundCloud is seeking a Senior Enterprise Security Engineer to own the security of our infrastructure and cloud environments across endpoints, identity, and third-party risk. You will lead incident response, harden multi-cloud architecture, and automate threat detection.

You will work across AWS and GCP, manage Google Workspace security, and direct our EDR/MDM stack while aligning with Legal, Privacy, and IT teams. A strong background in security automation and AI platforms is highly valued.

Qualifications

• : 6+ years of hands-on experience in security engineering or a combined software engineering/security role.
• : Broad understanding of the evolving cyber threat landscape, attack vectors, and industry security trends.
• : Deep proficiency with Google Workspace administration including security settings, audit logging, and DLP controls.
• : Practical experience with SentinelOne or equivalent EDR platforms.
• : Hands-on experience with JAMF Pro and Microsoft Intune.
• : Working knowledge of Google SecOps/Chronicle SIEM — building parsers, detection rules, dashboards.
• : Experience running or contributing to a Third-Party Risk Management program.
• : Strong cloud security background in AWS and/or GCP — IAM, security groups, audit trails, and config compliance.
• : Proficiency in Python, Ruby, or Go for security automation and tooling.
• : Experience with Terraform, containers, Kubernetes, CI/CD pipelines, and secrets management in microservices architectures.
• : Solid understanding of web app security, vulnerability assessment, and code review.
• : Familiarity with Context-Aware Access / BeyondCorp is a plus.
• : KnowBe4 security awareness platform is preferred.

Responsibilities

• Lead security incident response across infrastructure, endpoints, and cloud.
• Own security for internal workplace, on-premises, and cloud environments (AWS, GCP).
• Administer and harden Google Workspace policies as lead administrator.
• Manage endpoint security stack (SentinelOne, JAMF, Intune).
• Oversee security of AI inference, agents, and tooling.
• Drive Third-Party Risk Management with Legal/Privacy.
• Operate Chronicle SIEM for threat detection and investigations.
• Manage security awareness and phishing simulations.
• Collaborate with IT and NYC executives to secure key employees.
• Coordinate penetration testing and vulnerability assessments.
• Promote secure engineering practices with product teams.
• Identify automation opportunities across security operations.

Skills

Security engineering

Incident response

Cloud security

Google Workspace

SentinelOne

JAMF Pro

Intune

Chronicle SIEM

TPRM

AWS

GCP

GitHub security

Python

Go

Terraform

Kubernetes

CI/CD

Zero Trust

KnowBe4

AI platform security

Education

B.S. in Computer Science

Tools

JAMF Pro

Intune

Google Chronicle

SentinelOne

Job description

SoundCloud is seeking a Senior Enterprise Security Engineer to own the security of our infrastructure and cloud environments across endpoints, identity, and third-party risk. You will lead incident response, harden multi-cloud architecture, and automate threat detection.

You will work across AWS and GCP, manage Google Workspace security, and direct our EDR/MDM stack while aligning with Legal, Privacy, and IT teams. A strong background in security automation and AI platforms is highly valued.